Sub-processors
Version 0.0.1 · effective 24 August 2026
These are the providers that process data on Datta's behalf, under a processing agreement with obligations equivalent to ours. It is a living list: when a sub-processor is added or changed we give business customers 30 days' notice and they may object with reasons; if the objection is not resolved, they may terminate the affected part of the service.
An external document-verification provider will join this list the day it goes live in production, with the same prior notice. It is not active today.
The list here is by category. The named list, identifying each provider, is given to business customers on a paid account under a confidentiality agreement: it is not published openly, because naming the full supply chain on a public page only helps whoever is looking for the weak link.
| Provider category | Role | What reaches it | Where |
|---|---|---|---|
| Server infrastructure | Hosts the service | Service data, with the encryption described above | Canada, the United States or Europe |
| Offsite backup | Keeps an encrypted copy | Only the encrypted backup, which the provider cannot open | Canada |
| Transactional email | Delivers the service's emails | Your email and message content | United States |
| Messaging and voice | Delivers verification codes | Your phone number and the code | Global (carrier routing) |
| Notification delivery | Brings the notice to your phone | The notification identifier, with no analytics | Global |
| Document verification | Serves the technical database to the component running on your device | Nothing personal | Not applicable |
Version 0.0.1 · Last updated: 24 August 2026 · Controller: DATTTA LLC (trading as «Datta») · Contact: datta.global/contact